LSTSRV-L Archives

LISTSERV Site Administrators' Forum

LSTSRV-L

Options: Use Monospaced Font
Show Text Part by Default
Condense Mail Headers

Topic: [<< First] [< Prev] [Next >] [Last >>]

Parts/Attachments: text/plain (25 lines)
Print Reply
Sender:
"Forum on LISTSERV release 1.7" <[log in to unmask]>
Subject:
From:
"Amir Plivatsky" <[log in to unmask]>
Date:
Fri, 1 May 1992 17:19:58 +0300
In-Reply-To:
Eric Thomas <[log in to unmask]> "Re: mail forwarding" (Apr 30, 3:10pm)
Comments:
Domain style address is "[log in to unmask]"
Reply-To:
"Forum on LISTSERV release 1.7" <[log in to unmask]>
> Amir,
> Can you explain to me Eric's stattement concerning the security hole ?
>
> /Zvika
>
> ----------------------------Original message----------------------------
> On Wed, 29  Apr 1992 15:59:49 CST "Juan  M. Courcoul" <COURCOUL@VMTECQRO>
> said:
>
> >The latest (greatest)  version of MAILER, 2.08.04,  supports direct mail
> >forwarding of BSMTP compliant mail to any other host, be it on BITNET or
> >on Internet.
>
> This facility is a security hole.  The LISTSERV mail forwarding system is
> safe. I will say no more.
>
>   Eric
 
  If he meant that one can forge the sender in this way, it can be done
anyway using other facilities so it doesn't really matter.  (I cannot
think of other meaning, breaking the OS using that seems too
remote...).
 
                                Amir

ATOM RSS1 RSS2